This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa File: 400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa (raw, json) Hash identifier: 1Hy7LNzdoOZ6AaUWCJNep4Kj7U2wS392lieH2RNvq7E= Subject key identifier: 26:D8:78:2D:9A:84:5D:2C:C7:BB:93:08:B4:EE:BD:1D:02:00:EB:93 Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Certificate serial: 010D0C9F4328584C215B96D6CF5920FA9CEBE980 Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa Signing time: Tue 09 Dec 2025 14:00:38 +0000 ROA not before: Tue 09 Dec 2025 14:00:38 +0000 ROA not after: Mon 09 Mar 2026 13:00:38 +0000 asID: 63240 IP address blocks: 192.254.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:21:5b:96:d6:cf:59:20:fa:9c:eb:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a Validity Not Before: Dec 9 14:00:38 2025 GMT Not After : Mar 9 13:00:38 2026 GMT Subject: CN=1cfdec8e-c18c-422a-9b07-6fab1644dcb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b6:fd:de:a5:9d:7f:c2:db:0d:42:ed:19:cc: 5c:ee:34:d9:6e:89:6c:96:87:9a:0d:39:6f:0a:7d: ab:1f:67:a6:fc:de:af:f5:ac:5e:84:8c:49:19:89: d0:eb:c3:2c:35:34:d2:f3:7c:6a:d3:2c:11:af:54: be:f6:68:3f:22:79:5a:1b:fb:79:5a:be:e1:02:b0: 5c:46:4f:cc:98:ff:3b:36:e4:20:9e:9c:a7:9d:3c: 30:dd:6a:7d:fd:10:7c:69:2a:42:4d:ea:1f:fd:75: fb:57:a4:f6:c1:cc:61:1b:58:5a:92:e8:7d:e3:23: e7:2d:1e:a2:8e:17:77:87:c6:1f:b1:4c:cf:25:4e: 3a:e1:95:ea:af:d5:68:f4:7f:c4:5c:9d:10:52:c7: da:3e:ad:0b:39:22:ce:e5:bc:4f:62:0d:10:6d:da: ee:34:0c:4a:31:22:ea:72:a8:a5:41:9c:10:d4:2f: 3a:e9:a3:46:9c:62:44:da:a4:3c:43:39:f3:54:8b: ad:52:77:ec:65:1b:e4:fd:90:02:8f:e8:3a:8c:ed: f0:80:dd:8c:41:60:ba:ff:ba:8e:d1:a8:fe:ef:72: 36:79:73:3a:fc:03:00:8e:26:30:50:34:ce:d0:61: 01:e4:f0:2e:06:4f:9a:81:1d:49:21:bb:21:17:3b: 9a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D8:78:2D:9A:84:5D:2C:C7:BB:93:08:B4:EE:BD:1D:02:00:EB:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/400dff94-a8d0-3db2-bbdc-0f5b2970163c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl X509v3 Authority Key Identifier: keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer sbgp-ipAddrBlock: critical IPv4: 192.254.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:93:81:3d:02:37:6f:4e:65:e7:f4:e9:27:00:ce:96:06:85: 63:1d:8a:7e:0c:a5:f3:3c:30:57:7e:98:6f:e3:d4:56:62:e9: c3:4f:b7:72:e5:87:91:5c:e0:60:cb:c4:6d:a4:af:64:d3:03: fa:3f:c4:3a:95:cc:20:dc:d5:04:b7:de:df:61:b1:c5:5d:44: 72:5c:10:15:34:58:4d:13:b4:00:78:b3:72:98:4f:3b:65:a8: 6b:77:01:cc:fa:34:5c:85:b2:ea:a9:76:2f:65:ae:a3:28:7e: 45:1f:b5:ad:61:2a:9e:15:b0:a8:26:6e:34:33:e1:2d:37:7b: 54:53:d5:d8:89:b7:6d:fc:e6:1e:df:45:42:a9:c4:74:87:e1: a4:63:34:96:00:fb:79:19:4f:0b:fc:d0:52:4c:d2:1b:22:75: e9:ec:53:6a:f4:b0:fb:ae:40:e8:4b:69:f9:b1:7c:9c:07:3a: ee:d2:42:fa:a0:32:7e:c3:8a:59:47:b4:4d:a5:f4:1f:98:79: 59:c8:62:46:82:9a:25:9b:f6:f4:e1:08:57:68:80:27:81:b7: 49:ba:e0:3f:fa:37:f0:d7:17:69:d7:86:fa:56:fb:96:6f:3b: 89:f6:7a:a3:37:35:40:70:35:3e:76:a1:0a:7e:47:bc:47:1d: a1:82:f5:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwhW5bWz1kg+pzr6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5 ZDVhMB4XDTI1MTIwOTE0MDAzOFoXDTI2MDMwOTEzMDAzOFowLzEtMCsGA1UEAxMk MWNmZGVjOGUtYzE4Yy00MjJhLTliMDctNmZhYjE2NDRkY2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbb93qWdf8LbDULtGcxc7jTZbolsloeaDTlv Cn2rH2em/N6v9axehIxJGYnQ68MsNTTS83xq0ywRr1S+9mg/InlaG/t5Wr7hArBc Rk/MmP87NuQgnpynnTww3Wp9/RB8aSpCTeof/XX7V6T2wcxhG1hakuh94yPnLR6i jhd3h8YfsUzPJU464ZXqr9Vo9H/EXJ0QUsfaPq0LOSLO5bxPYg0QbdruNAxKMSLq cqilQZwQ1C866aNGnGJE2qQ8QznzVIutUnfsZRvk/ZACj+g6jO3wgN2MQWC6/7qO 0aj+73I2eXM6/AMAjiYwUDTO0GEB5PAuBk+agR1JIbshFzuabQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbYeC2ahF0sx7uTCLTuvR0CAOuTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvNDAwZGZmOTQtYThkMC0z ZGIyLWJiZGMtMGY1YjI5NzAxNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk ZjA3MjlkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP5tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeTgT0CN29OZef06ScAzpYGhWMdin4MpfM8MFd+mG/j1FZi6cNPt3Ll h5Fc4GDLxG2kr2TTA/o/xDqVzCDc1QS33t9hscVdRHJcEBU0WE0TtAB4s3KYTztl qGt3Acz6NFyFsuqpdi9lrqMofkUfta1hKp4VsKgmbjQz4S03e1RT1diJt2385h7f RUKpxHSH4aRjNJYA+3kZTwv80FJM0hsidensU2r0sPuuQOhLafmxfJwHOu7SQvqg Mn7DillHtE2l9B+YeVnIYkaCmiWb9vThCFdogCeBt0m64D/6N/DXF2nXhvpW+5Zv O4n2eqM3NUBwNT52oQp+R7xHHaGC9dU= -----END CERTIFICATE-----Generated at Sat Dec 20 23:04:29 2025 by rpki-client